CVE-2026-53132 vsock/virtio: fix potential unbounded skb queue

🗓️ 25 Jun 2026 08:38:21Reported by LinuxType

CVE-2026-53132: fix unbounded virtual socket virtio socket buffer queue by estimating buffer size for zero-length packets signaling end of message.

Reporter	Title	Published	Views	Family All 17
Chainguard	CVE-2026-53132 vulnerabilities	8 Jul 202602:17	–	cgr
CVE	CVE-2026-53132	25 Jun 202608:38	–	cve
Debian CVE	CVE-2026-53132	25 Jun 202608:38	–	debiancve
EUVD	EUVD-2026-39337	25 Jun 202609:31	–	euvd
NVD	CVE-2026-53132	25 Jun 202609:16	–	nvd
OSV	BELL-CVE-2026-53132	27 Jun 202606:13	–	osv
OSV	CGA-24HC-W2JV-V34R	7 Jul 202622:51	–	osv
OSV	CVE-2026-53132 vsock/virtio: fix potential unbounded skb queue	25 Jun 202608:38	–	osv
OSV	DEBIAN-CVE-2026-53132	25 Jun 202609:16	–	osv
OSV	ECHO-7794-48EC-133A	25 Jun 202620:51	–	osv

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/vmw_vsock/virtio_transport_common.c"
    ],
    "versions": [
      {
        "version": "077706165717686a2a6a71405fef036cd5b37ae0",
        "lessThan": "1eca304f97a34ed5e921e1f0e06c8b241f25bf12",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "077706165717686a2a6a71405fef036cd5b37ae0",
        "lessThan": "9bdc637fde66b63d6cad0caacd034888bb7bf5f5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "077706165717686a2a6a71405fef036cd5b37ae0",
        "lessThan": "100d5b2ffdc6468b9e48532641f29e83efdcb63c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "077706165717686a2a6a71405fef036cd5b37ae0",
        "lessThan": "059b7dbd20a6f0c539a45ddff1573cb8946685b5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5852a2b573f7a3a29df46296e56aa3491e589cdf",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "6.1.63",
        "lessThan": "6.2",
        "status": "affected",
        "versionType": "semver"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/vmw_vsock/virtio_transport_common.c"
    ],
    "versions": [
      {
        "version": "6.3",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.3",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.94",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.36",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.13",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/1eca304f97a34ed5e921e1f0e06c8b241f25bf12
git	www.git.kernel.org/stable/c/9bdc637fde66b63d6cad0caacd034888bb7bf5f5
git	www.git.kernel.org/stable/c/100d5b2ffdc6468b9e48532641f29e83efdcb63c
git	www.git.kernel.org/stable/c/059b7dbd20a6f0c539a45ddff1573cb8946685b5

28 Jun 2026 06:39Current

CVSS 3.17.1

EPSS0.0014